Hi, I'm not sure how to handle this issue I've been seeing recently. One morning several weeks ago I woke up and went to my site (allisonmackonline.com) and noticed I was already logged in...as another member of the site. I cleared my cookies and cache and it reset.

I just got a message from a user saying that they were logged in as me.

What is causing this? Have you guys seen this before? What can I do to prevent this? If any random user can log in as me, the site has a serious security risk that needs to be addressed.

I'm running XOOPS 2.0.13 on a linux machine.

Do you have any links that include a PHP session ID?

that could have been the case.

thanks for letting me know.